If we have Azure SSO, and an admin signs in before they are invited in the PMP console, it's extremely easy for them to accidentally create a new company instead. Automatic provisioning would allow admins to skip the need to assign access on both ends for every admin, avoid this potential accidental company creation, as well as provision by groups with specific roles tied to specific groups as needed.
This should no longer be the case.
We now added the permission "Domain.Read.All".
We will read all Domains associated with a Tenant. If a user with a different UPN tries to create a Cloud Company, we will inform them that one already exists and they are given the option to Request Access.